Scoping an Intrusion Using Identity, Host, and Network Indicators

Second half of a two-part series, this paper covers post identification activities. The techniques covered here could also be used for initial identification, but they're discussed here as though there is already an initial identification which can be used. The effort discussed herein, is...

By

Christopher Crowley

April 22, 2021

Login to download

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - Defending Against SCATTERED SPIDER and The Com with Cybercrime Intelligence_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Defending Against SCATTERED SPIDER and The Com with Cybercrime Intelligence

Due to the notoriety SCATTERED SPIDER and The Com have attracted as prolific cybercriminal threats, law enforcement has been tracking them closely.

DFIR - Blog - Unraveling the Mysteries of Digital Forensics- A Blog on the Secret Life of Devices_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Unraveling the Mysteries of Digital Forensics: A Blog on the "Secret Life of Devices" Workshop Series

The "Secret Life of Devices" series is designed to empower attendees with the knowledge to tackle modern digital forensic challenges.

DFIR_ICON_(1).PNG

blog image - ransomware summit.png

Digital Forensics, Incident Response & Threat Hunting

A Visual Summary of SANS Ransomware Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS Ransomware Summit 2024